NIST 800-171 ODP

NIST 800-171 R3 ODPs

ComplianceForge Support ComplianceForge Support
1 minute read

Listen to article
Audio generated by DropInBlog's Blog Voice AIâ„¢ may have slight pronunciation nuances. Learn more

ComplianceForge released NIST 800-171 R3 documentation updated to address DoD-provided Organization-Defined Parameters (ODP)! The NIST 800-171 Compliance Program (NCP) has been updated to include the recently-released ODP content for NIST 800-171 R3. These documentation templates can save you hundreds of hours of work.

NIST 800-171 Compliance Program (NCP)

The NCP comes with 3 versions of the documentation, based on your needs:

  1. Pure NIST 800-171 R2 to address current CMMC 2.0 L1-2 needs.
  2. A hybrid version that contains coverage for both R2 and R3.
  3. Pure NIST 800-171 R3 (including ODPs).

ComplianceForge documentation maps down to the Assessment Objective (AO) level, so you can see what the source of the requirements are. This can help make preparing for and conducting assessments more efficient, which can reduce compliance-related costs.

« Back to Blog

NIST SP 800‑53 R5 Control Families

This release includes a total of 1,189 controls, organized into 20 families:

  1. Access Control
  2. Awareness & Training
  3. Audit & Accountability
  4. Assessment, Authorization & Monitoring
  5. Configuration Management
  6. Contingency Planning
  7. Identification & Authentication
  8. Incident Response
  9. Maintenance
  10. Media Protection
  11. Physical & Environmental Protection
  12. Planning
  13. Program Management
  14. Personnel Security
  15. Personally Identifiable Information (PII) Processing & Transparency
  16. Risk Assessment
  17. System & Services Acquisition
  18. System & Communications Protection
  19. System & Information Integrity
  20. Supply Chain Risk Management

This count includes deprecated controls that have been removed or folded into others. Some controls are not categorized under baselines—low, moderate, high, or privacy—per NIST SP 800‑53B.

ComplianceForge provides full 1:1 mapping of all 20 families and their controls in its CDPP documentation.